My Oracle Support Banner

OPSS - Unable Start Server Showing Access Denied Exception in logs (Doc ID 1566634.1)

Last updated on DECEMBER 22, 2023

Applies to:

Oracle Platform Security for Java - Version 11.1.1.6.0 and later
Information in this document applies to any platform.

Symptoms

After applying the following patches, in OIM domain:

16569052 JDK160 ORACLE JROCKIT R28.2.7 Applied
16083651 SU Patch [D33T]: WLS PATCH SET UPDATE 10.3.6.0.4 Applied
6880880 Opatch 11.2.0.3 required Applied

OIM Server failed to start with the following errors:

<BEA-149205> <Failed to initialize the application '<APPLICATION>' due to error java.security.AccessControlException: access denied (oracle.security.jps.service.credstore.CredentialAccessPermission context=SYSTEM,mapName=oim,keyName=OIMSchemaPassword read).
java.security.AccessControlException: access denied (oracle.security.jps.service.credstore.CredentialAccessPermission context=<CONTEXT>,mapName=<MAPNAME>,keyName=<KEYNAME> read)
  at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
  at java.security.AccessController.checkPermission(AccessController.java:549)
  at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:458)
  at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:518)
  at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:544)
  at oracle.security.jps.internal.credstore.util.CsfUtil.checkPermission(CsfUtil.java:644)
  at oracle.security.jps.internal.credstore.ldap.LdapCredentialStore.getCredential(LdapCredentialStore.java:297)
  at oracle.iam.platform.utils.OIMAppInitializationListener.getCredentialPassword(OIMAppInitializationListener.java:168)
  at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAppInitializationListener.java:141)
  at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.run(BaseLifecycleFlow.java:290)
.....................

Caused By: java.security.AccessControlException: access denied (oracle.security.jps.service.credstore.CredentialAccessPermission context=<CONTEXT>,mapName=<MAPNAME>,keyName=<KEYNAME> read)
  at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
  at java.security.AccessController.checkPermission(AccessController.java:549)
  at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:458)
  at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:518)
  at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:544)
  at oracle.security.jps.internal.credstore.util.CsfUtil.checkPermission(CsfUtil.java:644)
  at oracle.security.jps.internal.credstore.ldap.LdapCredentialStore.getCredential(LdapCredentialStore.java:297)
  at oracle.iam.platform.utils.OIMAppInitializationListener.getCredentialPassword(OIMAppInitializationListener.java:168)
  at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAppInitializationListener.java:141)

.....................

 

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.